Re: Deny traffic from router itself

From: Nick (seajay76@nate.com)
Date: Fri Jan 20 2006 - 11:08:24 GMT-3


Hi!

I'm afraid there is no way to filter the packets the router itself generates.

Refer to the following;

"Access lists filter only traffic going through the router.
 They do not filter traffic originating from the router."
   (ICND v2.1(Official Course Book) P.4-27)

HTH

Nick

----- Original Message -----
From: "Gustavo Novais" <gustavo.novais@novabase.pt>
To: "Popgeorgiev Nikolay" <nikolay.popgeorgiev@siemens.com>; <ccielab@groupstudy.com>
Sent: Friday, January 20, 2006 10:40 PM
Subject: RE: Deny traffic from router itself

> You can try an access-class out, on the line vty's. that will limit the
> destinations to where you may telnet.
>
> Gustavo Novais
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Popgeorgiev Nikolay
> Sent: sexta-feira, 20 de Janeiro de 2006 12:59
> To: ccielab@groupstudy.com
> Subject: Deny traffic from router itself
>
> Hello people,
>
> I have a question is it possible with a ACL to deny packets from a
> router itself.For example I want to stop a user connected to the router
> from making telnet to another router ? But not with transport output
> command on the line interface, and without a route-map
>
>
> thanks !
>
> best,
> Nick
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Wed Feb 01 2006 - 07:45:50 GMT-3